c3f0d1c917b7de60ed89da29b64a8df0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3f0d1c917b7de60ed89da29b64a8df0_NeikiAnalytics.exe
Size

2.3MB
MD5

c3f0d1c917b7de60ed89da29b64a8df0
SHA1

b93192c22a39c589ab2586295681254a29f828cf
SHA256

94e5f03c36583fc25a73d7bc1bba9876d10da188451c4838c1f8bbd8bdb4c284
SHA512

85f9d0336ba2c8b8b519758a891049cd9cb03920cf3d5a7a27e2a1f537de527f654850645c92d38c20580850b6ec330dfd46c2ae86f2535f56e0f05df33d368c
SSDEEP

49152:NAi/zZa9g74Jk5em8f6CtPZFqJC5QJ4azDESW2V7AmGe:NPbZO+4zm8f9O/zYSW2Ye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3f0d1c917b7de60ed89da29b64a8df0_NeikiAnalytics.exe

Files

c3f0d1c917b7de60ed89da29b64a8df0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

de24e363bf918e471a02145d129d645f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

OleDoAutoConvert

kernel32

ContinueDebugEvent
GetModuleHandleA
OutputDebugStringA
GetModuleFileNameA
SetStdHandle
PurgeComm
IsDBCSLeadByteEx
SetThreadIdealProcessor
GetFileSize
ResetEvent

winscard

g_rgSCardT0Pci

advapi32

GetSidLengthRequired
DuplicateToken

Sections

E
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ